Quantum threat to encryption looms

Cybercriminals are storing encrypted data across various sectors, waiting for quantum computers powerful enough to decrypt them. These encrypted data include backups, professional emails, and virtual private network (VPN) connections, which rely on older encryption methods like RSA and elliptic curve cryptography.

RSA and elliptic curve cryptography at risk

RSA and elliptic curve cryptography have been the backbone of internet security since the late 1970s. They rely on mathematical problems that classical computers cannot solve quickly, but quantum computers could crack them in hours using Shor's algorithm, a method discovered in 1994 by mathematician Peter Shor.

Post-quantum standards in development

In 2024, the U.S. National Institute of Standards and Technology (NIST) finalized two post-quantum cryptographic standards: ML-KEM for key exchanges and ML-DSA for digital signatures. Microsoft has since integrated these into Windows and later made them available for Linux through SymCrypt-OpenSSL.

Harvest now, decrypt later strategy

Cybersecurity experts describe the practice of storing encrypted data for future decryption as "harvest now, decrypt later." Encrypted data like contracts, patents, or medical files can retain value for up to fifteen years, longer than the 2029 target for quantum computers capable of breaking current encryption.

ANSSI mandates post-quantum readiness

The French National Agency for Information Systems Security (ANSSI) requires that by 2027, products eligible for official certification must incorporate post-quantum algorithms. The agency warns that purchasing products without post-quantum cryptography after 2030 will be unreasonable and recommends using hybrid encryption until full transition.

Early post-quantum approvals and challenges

In October 2025, ANSSI granted its first post-quantum security visas to a Thales chip card and a Samsung component, both using lattice-based cryptography. However, the agency identified technical and organizational barriers in 2024 among fifty ministries, strategic companies, and thirty IT service providers.

G7 emphasizes preparedness for quantum threats

In October 2025, ANSSI led a G7 cybersecurity meeting alongside Canada, Germany, and other nations. The G7 published a report titled Preparing for the Post-Quantum Era: A Call to Action, warning of risks to industrial secrets, authentication, and interconnected supply chains. The report recommends five priority actions, including inventorying cryptographic usages and integrating post-quantum criteria into public tenders.

SMEs face practical steps for transition

For small and medium-sized enterprises (SMEs), the first steps involve identifying where sensitive data is protected by RSA or elliptic curve encryption, such as backups and remote access. ANSSI advises prioritizing data with long lifespans, like industrial secrets and health records, and recommends updating a simple table quarterly to monitor encryption practices.

Gradual transition recommended

There is no immediate deadline for SMEs to transition to post-quantum cryptography, but they should consider it when renewing contracts. Dustin Moody, a mathematician at NIST, emphasized that full integration will take time, and system administrators should start the process now.